All Apps and Add-ons

SNMP event

punithjigali
Explorer

How to configure Univesal fowarder to send snmp traps in unix server and how to collect?
whats the use of snmp modular input and where to install it? on the fowarder side or splunk instance?
can we use syslog for snmp traps??

0 Karma

PavelP
Motivator

Hello @punithjigali ,

to send snmp traps from a linux host:

  • install and configure snmp to send traps independently from splunk
  • configure script input to run snmptrap command periodically

how to collect SNMP described here: https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/SendSNMPeventstoSplunk

whats the use of snmp modular input and where to install it? on the fowarder side or splunk instance? - it depends on where you want to capture SNMP input - on Indexer or on HF, on UF too, but you have to configure it manually, because UF has no UI.

can we use syslog for snmp traps - yes, snmp deamon can collect traps and write them to log, and syslog can read this log and send events to Splunk. Alternatevely UF can read the log and send events to Splunk.

There are many options, choose what suits you best.

Let me know if it helps

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Raw Data to Executive-Ready Stories, Faster

Build Data Stories for Every Audience  A dashboard is rarely just a dashboard. It might be the view an ...

Guided Onboarding with Auto-schema Is Now Generally Available

  We are excited to announce the General Availability of Guided Onboarding with Auto-Schematization ...

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...